- openldap-bugs - openldap.org

[Issue 9716] New: Fix default guide versions for head and 2.6
by openldap-its＠openldap.org 26 May '26

26 May '26

https://bugs.openldap.org/show_bug.cgi?id=9716 Issue ID: 9716 Summary: Fix default guide versions for head and 2.6 Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- The preamble file needs to be fixed in openldap head and the 2.6 release branch to be correct. -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 9009] 2.7: Switch to LMDB v1.0
by openldap-its＠openldap.org 26 May '26

26 May '26

https://bugs.openldap.org/show_bug.cgi?id=9009 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: • aa02d9f5 by Howard Chu at 2026-05-22T03:51:12+01:00 ITS#9009 slapd-mdb: refix Makefile RE27: • 7ae0869b by Howard Chu at 2026-05-22T19:12:49+00:00 ITS#9009 slapd-mdb: refix Makefile -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10512] New: systemd exec - update to absolute path
by openldap-its＠openldap.org 26 May '26

26 May '26

https://bugs.openldap.org/show_bug.cgi?id=10512 Issue ID: 10512 Summary: systemd exec - update to absolute path Product: OpenLDAP Version: 2.6.10 Hardware: All OS: Linux Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: daniel(a)iamniz.co.uk Target Milestone: --- Could the ExecStart option in the systemd unit file be updated to use a absolute path? ERROR:systemctl: slapd.service: Exec is not an absolute path: ExecStart=sh -c 'mkdir -p /run/slapd; \ chown "$SLAPD_USER":"$SLAPD_GROUP" /run/slapd; \ [ -d "$SLAPD_CONF" ] && confflag=-F || confflag=-f; \ exec /usr/sbin/slapd -d0 \ ${SLAPD_SERVICES:+-h "$SLAPD_SERVICES"} \ ${SLAPD_USER:+-u "$SLAPD_USER"} \ ${SLAPD_GROUP:+-g "$SLAPD_GROUP"} \ ${SLAPD_CONF:+$confflag "$SLAPD_CONF"} \ $SLAPD_OPTIONS' ERROR:systemctl: slapd.service: Exec command does not exist: (ExecStart) sh ERROR:systemctl: slapd.service: but this does exist: /usr/bin/sh ERROR:systemctl: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ERROR:systemctl: The SystemD ExecXY commands must always be absolute paths by definition. ERROR:systemctl: Oops, 1 executable paths were not found in the current environment. Refusing. ERROR:systemctl: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Regards, Dan Nisbet -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 10162] New: Fix for binary attributes data corruption in back-sql
by openldap-its＠openldap.org 20 May '26

20 May '26

https://bugs.openldap.org/show_bug.cgi?id=10162 Issue ID: 10162 Summary: Fix for binary attributes data corruption in back-sql Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: dex.tracers(a)gmail.com Target Milestone: --- Created attachment 1006 --> https://bugs.openldap.org/attachment.cgi?id=1006&action=edit Fix for binary attributes corruption on backed-sql I've configured slapd to use back-sql (mariadb through odbc) and observed issues with the BINARY data retrievals from the database. The length of the attributes was properly reported, but the correct data inside was always 16384 bytes and after that point - some junk (usually filled-up with AAAAAAAA and some other attributes data from memory). During the debugging - I've noticed that: - The MAX_ATTR_LEN (16384 bytes) is used to set the length of the data for BINARY columns when SQLBindCol is done inside of the "backsql_BindRowAsStrings_x" function - After SQLFetch is done - data in row->cols[i] is fetched up to the specified MAX_ATTR_LEN - After SQLFetch is done - the correct data size (greater than MAX_ATTR_LEN) is represented inside of the row->value_len I'm assuming that slapd allocates the pointer in memory (row->cols[i]), fills it with the specified amount of data (MAX_ATTR_LEN), but when forming the actual attribute data - uses the length from row->value_len and so everything from 16384 bytes position till row->value_len is just a junk from the memory (uninitialized, leftovers, data from other variables). After an investigation, I've find-out that: - for BINARY or variable length fields - SQLGetData should be used - SQLGetData supports chunked mode (if length is unknown) or full-read mode if the length is known - it could be used in pair with SQLBindCol after SQLFetch (!) Since we have the correct data length inside of row->value_len, I've just added the code to the backsql_get_attr_vals() function to overwrite the corrupted data with the correct data by issuing SQLGetData request. And it worked - binary data was properly retrieved and reported over LDAP! My current concerns / help needed - I'm not very familiar with the memory allocation/deallocation mechanisms, so I'm afraid that mentioned change can lead to memory corruption (so far not observed). Please review attached patch (testing was done on OPENLDAP_REL_ENG_2_5_13, and applied on the master branch for easier review/application). -- You are receiving this mail because: You are on the CC list for the issue.

1 13

[Issue 10503] saslauthz LDAP_X_SCOPE_GROUP fails to escape proxyAuthz asserted DN in internal group filter, enabling wildcard substring-filter group-membership bypass
by openldap-its＠openldap.org 19 May '26

19 May '26

https://bugs.openldap.org/show_bug.cgi?id=10503 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|IN_PROGRESS |RESOLVED --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: • 9b55792b by Howard Chu at 2026-05-19T16:39:09+00:00 ITS#10503 authzTo: reject member attributes with non-DN syntax RE27: • 0c8a5875 by Howard Chu at 2026-05-19T22:36:36+00:00 ITS#10503 authzTo: reject member attributes with non-DN syntax RE26: • 41d7478a by Howard Chu at 2026-05-19T23:00:51+00:00 ITS#10503 authzTo: reject member attributes with non-DN syntax -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9009] 2.7: Switch to LMDB v1.0
by openldap-its＠openldap.org 19 May '26

19 May '26

https://bugs.openldap.org/show_bug.cgi?id=9009 --- Comment #1 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: • 6e7690e8 by Howard Chu at 2026-05-19T17:06:20+01:00 ITS#9009 slapd-mdb: fix Makefile for LMDB 1.0 RE27: • 12656a7c by Howard Chu at 2026-05-19T22:36:27+00:00 ITS#9009 slapd-mdb: fix Makefile for LMDB 1.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10503] saslauthz LDAP_X_SCOPE_GROUP fails to escape proxyAuthz asserted DN in internal group filter, enabling wildcard substring-filter group-membership bypass
by openldap-its＠openldap.org 19 May '26

19 May '26

1 0

[Issue 8605] spelling
by openldap-its＠openldap.org 15 May '26

15 May '26

https://bugs.openldap.org/show_bug.cgi?id=8605 --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master: 2216dbd9ee8d5c7a4b4d22e59e5831ed9cae32af mdb.master3: 93c460b8e4607558a9faf8f53d65468c25d73a12 mdb/RE1.0: f3ef35bbfbaaab8984b1a4eeb553643fb507862f mdb/RE0.9: 8aa8c1976f2d8e7db2240445700053d2a3a53c88 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10503] saslauthz LDAP_X_SCOPE_GROUP fails to escape proxyAuthz asserted DN in internal group filter, enabling wildcard substring-filter group-membership bypass
by openldap-its＠openldap.org 14 May '26

14 May '26

https://bugs.openldap.org/show_bug.cgi?id=10503 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|OpenLDAP-devs | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8461] Unable to import LDIF from back-hdb DB to back-mdb db
by openldap-its＠openldap.org 13 May '26

13 May '26

https://bugs.openldap.org/show_bug.cgi?id=8461 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Fixed by switch to lmdb 1.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9009] 2.7: Switch to LMDB v1.0
by openldap-its＠openldap.org 13 May '26

13 May '26

https://bugs.openldap.org/show_bug.cgi?id=9009 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|UNCONFIRMED |RESOLVED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8461] Unable to import LDIF from back-hdb DB to back-mdb db
by openldap-its＠openldap.org 13 May '26

13 May '26

https://bugs.openldap.org/show_bug.cgi?id=8461 Issue 8461 depends on issue 9009, which changed state. Issue 9009 Summary: 2.7: Switch to LMDB v1.0 https://bugs.openldap.org/show_bug.cgi?id=9009 What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6825] unique_uri filter reaching beyond its intended target
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=6825 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Assignee|bugs(a)openldap.org |ondra(a)mistotebe.net Target Milestone|2.7.1 |2.7.0 Resolution|--- |TEST --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: • 985d420d by Ondřej Kuzník at 2026-04-30T19:50:52+00:00 ITS#6825 slapd: add modify_entry helper • 9d7d8e52 by Ondřej Kuzník at 2026-04-30T19:50:52+00:00 ITS#6825 slapo-unique: use modify_entry • a7dd52a9 by Ondřej Kuzník at 2026-04-30T19:50:52+00:00 ITS#6825 slapo-unique: adjust test • 85c8e671 by Ondřej Kuzník at 2026-04-30T19:50:52+00:00 ITS#6825 slapo-constraint: also use modify_entry • f3a7fa1a by Ondřej Kuzník at 2026-04-30T19:50:52+00:00 ITS#6825 back-ldif: also use modify_entry -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Bug 9211] New: Relax control is not consistently access-restricted
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=9211 Bug ID: 9211 Summary: Relax control is not consistently access-restricted Product: OpenLDAP Version: 2.4.49 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- The following operations can be performed by anyone having 'write' access (not even 'manage') using the Relax control: - modifying/replacing structural objectClass - adding/modifying OBSOLETE attributes Some operations are correctly restricted: - adding/modifying NO-USER-MODIFICATION attributes marked as manageable (Modification of non-conformant objects doesn't appear to be implemented at all.) In the absence of ACLs for controls, I'm of the opinion that all use of the Relax control should require manage access. The Relax draft clearly and repeatedly discusses its use cases in terms of directory _administrators_ temporarily relaxing constraints in order to accomplish a specific task. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Issue 6198] Authorization for extensions
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=6198 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: • 50befa2a by Ondřej Kuzník at 2026-04-30T16:41:28+00:00 ITS#6198 Expose verbmasks globally • c28108fb by Ondřej Kuzník at 2026-04-30T16:41:28+00:00 ITS#6198 backend: Simplify opflag handling • bb64b0b5 by Ondřej Kuzník at 2026-04-30T16:41:28+00:00 ITS#6198 ACL: separate <who> checking • fbf682a6 by Ondřej Kuzník at 2026-04-30T16:41:28+00:00 ITS#6198 Allow extop and control restrictions in ACLs • aefd96f8 by Ondřej Kuzník at 2026-04-30T16:41:28+00:00 ITS#6198 Introduce restrictop functionality • 0160e81d by Ondřej Kuzník at 2026-04-30T16:41:28+00:00 ITS#6198 Register exop and control OID macros in schema -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9011] add mdb_txn_flags()
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=9011 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |1.0.0 Assignee|bugs(a)openldap.org |hyc(a)openldap.org --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master3: • cf1478d2 by Christopher Zimmermann at 2026-05-04T14:46:11+01:00 ITS#9011 LMDB: add mdb_txn_flags() • 4de954fe by Howard Chu at 2026-05-04T14:47:50+01:00 Whitespace cleanup • c38375ec by Howard Chu at 2026-05-04T14:50:25+01:00 ITS#9011 LMDB: fix typo in prev commit mdb.RE/1.0: • 11ebc033 by Christopher Zimmermann at 2026-05-04T14:48:56+01:00 ITS#9011 LMDB: add mdb_txn_flags() • 1924ae9b by Howard Chu at 2026-05-04T14:49:07+01:00 Whitespace cleanup • c2b1cab5 by Howard Chu at 2026-05-04T14:50:46+01:00 ITS#9011 LMDB: fix typo in prev commit -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8335] MDB_MULTIPLE issues
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=8335 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |0.9.36 Assignee|bugs(a)openldap.org |hyc(a)openldap.org --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.RE/0.9: • 8029fc6f by Howard Chu at 2026-04-27T18:44:21+01:00 ITS#8335 LMDB: reject MDB_MULTIPLE put with 0 items mdb.master: • 6888aa47 by Howard Chu at 2026-04-27T18:43:52+01:00 ITS#8335 LMDB: reject MDB_MULTIPLE put with 0 items mdb.master3: • 0ff5b99e by Howard Chu at 2026-04-27T18:42:49+01:00 ITS#8335 LMDB: reject MDB_MULTIPLE put with 0 items -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7772] liblmdb sub-page growth when adding existing data
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=7772 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs(a)openldap.org |hyc(a)openldap.org Target Milestone|--- |0.9.36 --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master: • 143ce300 by Howard Chu at 2026-04-27T15:02:14+01:00 ITS#7772 LMDB: fix sub-page growth mdb.RE/0.9: • 510aa4b8 by Howard Chu at 2026-04-27T15:02:25+01:00 ITS#7772 LMDB: fix sub-page growth mdb.master3: • 134e5ace by Howard Chu at 2026-04-27T14:59:00+01:00 ITS#7772 LMDB: fix sub-page growth -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8803] [PATCH] Add -L option for using external locking
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=8803 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |1.0.0 Assignee|bugs(a)openldap.org |hyc(a)openldap.org --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master3: • 7a1f36d5 by Nir Soffer at 2026-04-24T20:19:46+01:00 ITS#8803 LMDB: add tool option to disable locking -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8192] liblmdb confuses Windows error code with errno values
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=8192 --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master3: • ba6e0018 by Howard Chu at 2026-04-24T18:07:42+01:00 ITS#8192 fix prev commit -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8192] liblmdb confuses Windows error code with errno values
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=8192 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |1.0.0 Assignee|bugs(a)openldap.org |hyc(a)openldap.org --- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master3: • bf5c4e0f by Howard Chu at 2026-04-24T16:05:40+01:00 ITS#8192 LMDB: define new error codes to avoid errno abuse -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8579] LMDB: me_fd should be O_CLOEXEC on POSIX systems
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=8579 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs(a)openldap.org |hyc(a)openldap.org --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master3: • cf52db2b by Howard Chu at 2026-04-23T18:55:06+01:00 ITS#8579 LMDB: all descriptors should have O_CLOEXEC -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9027] LMDB: API to retrieve map address
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=9027 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |1.0.0 Assignee|bugs(a)openldap.org |hyc(a)openldap.org --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master3: • 63698faf by Howard Chu at 2026-04-22T19:22:56+01:00 ITS#9027 LMDB: expose address of memory map -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8174] mdb_drop(,MAIN_DBI,) leaks pages of named DBs
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=8174 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Target Milestone|--- |1.0.0 Resolution|--- |TEST Assignee|bugs(a)openldap.org |hyc(a)openldap.org --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.master3: • d0fcfd3d by Howard Chu at 2026-04-22T17:24:28+01:00 ITS#8174 LMDB: fixes for mdb_drop(MAIN_DBI) -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8590] LMDB: Suppress SIGPIPE in mdb_env_copythr on OS X
by openldap-its＠openldap.org 06 May '26

06 May '26

https://bugs.openldap.org/show_bug.cgi?id=8590 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs(a)openldap.org |hyc(a)openldap.org Target Milestone|--- |0.9.36 --- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> --- mdb.RE/0.9: • f06db92f by Lorenz Bauer at 2026-04-22T19:33:30+01:00 ITS#8590 LMDB: Use F_SETNOSIGPIPE on OS X mdb.master: • 66be07b7 by Lorenz Bauer at 2026-04-22T19:30:57+01:00 ITS#8590 LMDB: Use F_SETNOSIGPIPE on OS X mdb.master3: • 81697bc2 by Lorenz Bauer at 2026-04-22T19:32:45+01:00 ITS#8590 LMDB: Use F_SETNOSIGPIPE on OS X -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs